How to report a scammer account on Instagram, the red flags that identify common scams, what happens after you report, and the Malaysia steps if you paid.
Report the profile or message in the Instagram app, then save screenshots and stop transferring money. Meta reviews against its fraud rules and may disable the account, warn you, or take no action. Reporting does not refund losses. In Malaysia also file with PDRM or the bank if money moved.
SummaryAn account you have never followed messages you about an investment that doubled someone's money last week. A profile using a well-known brand's logo is running a giveaway that needs your bank details to claim. Someone who has been chatting with you for weeks suddenly needs money for an emergency. These are three different scripts, but they share the same fix: report the account, and know what actually happens once you do.
Reporting as "scam, fraud or spam" tells Instagram the account is trying to take something from you dishonestly, which is a different category from harassment or impersonation. This guide covers how the common scripts work, how to report accurately, what Meta's policy actually prohibits, and the Malaysian steps to take if money has already moved.
Last checked: 9 November 2026.
To report a scammer on Instagram, open the account's profile or the message itself, tap the menu, choose "Report", and select the category for scam, fraud or spam. Save the account's URL, its username and any messages or payment requests before you report, because the account can delete content or disappear. Meta's enforcement can include removing content, restricting an advertising account, limiting features or disabling the account entirely, with no published timeline. If you already sent money, contact your bank and call the National Scam Response Centre on 997 immediately, separately from the platform report.
Meta's own policy on prohibited commercial practices names the patterns its reviewers look for, and most scams reported on Instagram fit one of them:
| Script | How it usually opens | What it actually wants |
|---|---|---|
| Investment scheme | A DM or comment claiming fixed or quick returns, often with screenshots of past profits | Your money, moved to a wallet or account the scammer controls |
| Romance scheme | A new follower builds a relationship over weeks before asking for help | Money sent for a fabricated emergency, often repeatedly |
| Brand or celebrity bait | A fake Page or comment using a real brand's or public figure's name and image | Your payment details or personal information for a fake giveaway or discount |
| Advance fee or fake job | A message offering a job, loan or prize that needs an upfront fee first | A one-off payment that the "reward" never arrives to cover |
| Fake shop | An ad or Page selling goods at an unusually good price | Payment for an item that is never delivered, or arrives as something else |
From the account's profile, tap the three dots in the top right and choose "Report", then select the category for scam, fraud or spam and follow the prompts, as described on Instagram's report a post or profile page. If the scam arrived as a direct message, report it from inside the chat so the message content itself reaches the reviewing team, rather than reporting only the profile. Instagram's help centre also lists separate forms for related issues, such as a fake ad, if the scam is running as paid advertising rather than an organic post.
Meta's enforcement options for this policy, as described on its fraud and deception policy page, include removing the content or ads, reducing distribution, restricting advertising accounts, limiting features, requiring verification, or disabling the account. Meta also says automated systems act on behavioural patterns, such as sending unsolicited messages to accounts that do not follow back, independently of individual reports. There is no published fixed timeline, and Meta itself says its enforcement is not perfect and will not catch every violation.
Act on the money before the report. Contact your bank's fraud hotline straight away, and call the National Scam Response Centre on 997, which coordinates with banks and the police to try to block a transaction before it clears. Before paying anyone new, including someone claiming to help you recover money already lost, check the receiving account number or phone number on PDRM's Semak Mule portal, which checks against police scam reports. File a police report once you have made the bank and NSRC contact, and report the cyber incident to Cyber999 for technical analysis and escalation support.
Brand-bait and celebrity-bait scams use a real business's or person's name and image to look credible. If the fake account is also pretending to be a specific identifiable person or business, add an impersonation report alongside the scam report; our guide to reporting a fake Instagram account for impersonation covers that route in detail. A business whose brand is being used this way should also warn its real followers from its genuine, verified account.
If the account is still active after a reasonable wait, check that the category matched the content exactly and resubmit with clearer screenshots, including any payment request. Where a Malaysian business or group of victims is affected, MCMC's complaint portal is a separate channel for harmful content left up on a licensed platform. Our guide to what to do when a report is rejected covers general escalation in more depth.
A single accurate report resolves most individual scam accounts. A case review can help when several accounts are running the same script against your customers, the scam overlaps with a compromised business account, or the evidence needs organising across platforms. SocialSafe by AwareXone reviews the case first, works only through official report forms, and never asks for your password, OTP or banking details. Read how we work, or start at the recovery and removal hub if your own account has also been affected.
More free guides on the same kind of problem.
